CVEs published April 17, 2026
166 CVEs were published on April 17, 2026: 18 critical, 60 high.
- Published
- 166
- Critical
- 18
- High
- 60
- Medium
- 81
- Low
- 7
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 97
Most affected products
- Dell PowerProtect Data Domain
- 14
- FirebirdSQL firebird
- 9
- libgphoto2
- 8
- neutrinolabs xrdp
- 8
- ChurchCRM CRM
- 7
- Anviz CX7 Firmware · Anviz CX2 Lite Firmware
- 5
- LabRedesCefetRJ WeGIA
- 5
- Anviz CX7 Firmware
- 4
- HashiCorp Vault · github.com/hashicorp/vault
- 4
- CubeCart Limited CubeCart
- 3
Critical 18
- CVE-2026-40484ChurchCRM: Authenticated Remote Code Execution via Unrestricted PHP File Write in Database Restore FunctionChurchCRM CRM
- CVE-2026-40582ChurchCRM: Authentication Bypass in `/api/public/user/login` Allows Bypass of 2FA and Account LockoutChurchCRM CRM
- CVE-2026-40324Hot Chocolate's Utf8GraphQLParser has Stack Overflow via Deeply Nested GraphQL DocumentsChilliCream graphql-platform · HotChocolate.Language
- CVE-2026-40478Improper neutralization of specific syntax patterns for unauthorized expressions in Thymeleafthymeleaf · org.thymeleaf:thymeleaf-spring5 +2
- CVE-2026-40477Improper restriction of the scope of accessible objects in Thymeleaf expressionsthymeleaf · org.thymeleaf:thymeleaf-spring5 +2
- CVE-2026-40258Gramps Web API has Zip Slip Path Traversal in Media Archive Importgramps-project gramps-web-api · gramps-webapi
- CVE-2026-40351FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypasslabring FastGPT
- CVE-2026-23500Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configurationdolibarr · dolibarr/dolibarr
- CVE-2026-35546Anviz Products Missing Authentication for Critical FunctionAnviz CX7 Firmware · Anviz CX2 Lite Firmware
- CVE-2026-32105xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS modeneutrinolabs xrdp
- CVE-2026-40342Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code ExecutionFirebirdSQL firebird
- CVE-2026-40525OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPIvolcengine OpenViking · openviking
- CVE-2026-6284Horner Automation Cscape and XL4, XL7 PLC Weak password requirementsHorner Automation Cscape · Horner Automation XL7 PLC +1
- CVE-2025-15625Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud ServerSparx Systems Pty Sparx Pro Cloud Server
- CVE-2025-15624Plaintext Storage of a Password in Sparx Pro Cloud Server.Sparx Systems Pty Sparx Pro Cloud Server
- CVE-2025-15623Sparx Pro Cloud Server reveals sensitive information to an unauthenticated userSparx Systems Pty Sparx Pro Cloud Server
- CVE-2026-6443Essentialplugin Plugins (Various Versions) - Injected Backdooressentialplugin Accordion and Accordion Slider · essent… +20
- CVE-2026-37749A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authen
High 60
- CVE-2026-40581ChurchCRM: Cross-Site Request Forgery (CSRF) in SelectDelete.php Leading to Permanent Data DeletionChurchCRM CRM
- CVE-2026-2262Easy Appointments <= 3.12.21 - Unauthenticated Sensitive Information Exposure via REST APIeasyappointments Easy Appointments
- CVE-2026-40480ChurchCRM has Missing Object-Level Authorization / IDOR in `/api/person/{personId}`ChurchCRM CRM
- CVE-2026-40482ChurchCRM has Authenticated SQL Injection in `/api/families/byCheckNumber/{scanString}`ChurchCRM CRM
- CVE-2026-40323SP1 V6 Recursion Circuit Row-Count Binding Gapsuccinctlabs sp1 · sp1_sdk +2
- CVE-2026-40481monetr: Unauthenticated Stripe webhook reads attacker-sized request bodies before signature validationmonetr · github.com/monetr/monetr
- CVE-2026-5720miniupnpd Integer Underflow SOAPAction Header Parsingminiupnp project miniupnpd
- CVE-2026-40474wger has Broken Access Control in the Global Gym Configuration Update Endpointwger-project wger · wger
- CVE-2026-29013libcoap Out-of-Bounds Read in OSCORE CBOR Unwrap Handlinglibcoap
- CVE-2026-40321DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG uploaddnnsoftware Dnn.Platform · DotNetNuke.Core
- CVE-2026-40352FastGPT: NoSQL Injection in updatePasswordByOld Leads to Account Takeoverlabring FastGPT
- CVE-2026-40303zrok allows unauthenticated DoS via unbounded memory allocation in striped session cookie parsingopenziti zrok · github.com/openziti/zrok +1
- CVE-2026-40196HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocationsysadminsmedia homebox
- CVE-2026-40286WeGIA has Cross-Site Scripting in Controle de ContribuiçãoLabRedesCefetRJ WeGIA
- CVE-2026-40285WeGIA has SQL Injection via Session Variable Override in DespachoControle.phpLabRedesCefetRJ WeGIA
- CVE-2026-40527radare2 Command Injection via DWARF Parameter Namesradareorg radare2
- CVE-2026-35512xrdp: Heap buffer overflow in EGFX channelneutrinolabs xrdp
- CVE-2026-33689xrdp: Pre-authentication out-of-bounds reads in channel parsersneutrinolabs xrdp
- CVE-2026-33516xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsersneutrinolabs xrdp
- CVE-2026-32650Anviz CrossChex Standard Algorithm DowngradeAnviz CrossChex Standard
- CVE-2026-40434Anviz CrossChex Standard Improper Verification of Source of a Communication ChannelAnviz CrossChex Standard
- CVE-2026-35682Anviz CX2 Lite Command InjectionAnviz CX2 Lite Firmware
- CVE-2026-32623xrdp: Heap buffer overflow in NeutrinoRDP channel reassemblyneutrinolabs xrdp
- CVE-2026-40066Anviz Products Download of Code Without Integrity CheckAnviz CX7 Firmware · Anviz CX2 Lite Firmware
- CVE-2026-40461Anviz Products Missing Authentication for Critical FunctionAnviz CX7 Firmware · Anviz CX2 Lite Firmware
- CVE-2026-32107xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid failsneutrinolabs xrdp
- CVE-2026-32324Anviz CX7 Firmware Use of Hard-coded Cryptographic KeyAnviz CX7 Firmware
- CVE-2026-35215Firebird: DoS via malicious slice descriptor in slice packetFirebirdSQL firebird
- CVE-2026-34232Firebird: DoS via `op_response` packet from clientFirebirdSQL firebird
- CVE-2026-33337Firebird has a buffer overflow when parsing corrupted slice packetsFirebirdSQL firebird
- CVE-2026-28224Firebird Null Pointer Dereference via CryptCallback causes DOSFirebirdSQL firebird
- CVE-2026-27890Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data SegmentsFirebirdSQL firebird
- CVE-2026-28212Firebird has potential server crash via null pointer dereference when processing op_slice packetFirebirdSQL firebird
- CVE-2025-65104Firebird: Information leak vulnerability in firebird3 client when used with newer serverFirebirdSQL firebird
- CVE-2026-5718Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypassglenwpcoder Drag and Drop Multiple File Upload for Contact…
- CVE-2026-5710Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.6 - Unauthenticated Limited Arbitrary File Read via mfile Fieldglenwpcoder Drag and Drop Multiple File Upload for Contact…
- CVE-2026-40518ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Modebytedance deer-flow
- CVE-2026-3464WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_fileaguilatechnologies WP Customer Area
- CVE-2026-21733GPU DDK - Incorrect flags validation in RGXDerivePTEProt8 can allow GPU to overwrite read-only shared memory (e.g. libc.so)Imagination Technologies Graphics DDK
- CVE-2026-40516OpenHarness SSRF via web_fetch and web_searchHKUDS OpenHarness
- CVE-2026-40515OpenHarness Permission Bypass via grep and glob root argumentHKUDS OpenHarness
- CVE-2026-40459LDAP Injection in PAC4JPAC4J
- CVE-2026-40458Cross-Site Request Forgery in PAC4JPAC4J · org.pac4j:pac4j-core
- CVE-2026-6507Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processingdnsmasq · Red Hat Enterprise Linux +1
- CVE-2026-6483Wavlink WL-WN530H4 internet.cgi snprintf os command injectionWavlink WL-WN530H4
- CVE-2026-23776Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release verDell PowerProtect Data Domain
- CVE-2026-23778Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release verDell PowerProtect Data Domain
- CVE-2026-23775Dell PowerProtect Data Domain appliances with Data Domain Operating System (DD OS) of Feature Release versions 8.0 through 8.5, LTS2025 releDell PowerProtect Data Domain appliances
- CVE-2025-36568Dell PowerProtect Data Domain BoostFS for client of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.Dell PowerProtect Data Domain BoostFS
- CVE-2026-33392In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypassJetBrains YouTrack
- CVE-2026-23853Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release verDell PowerProtect Data Domain
- CVE-2026-4659Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversalunitecms Unlimited Elements For Elementor
- CVE-2026-6421Mobatek MobaXterm Home Edition msimg32.dll uncontrolled search pathMobatek MobaXterm Home Edition
- CVE-2026-6482Local Privilege Escalation via OpenSSL configuration file in Insight AgentRapid7 Insight Agent
- CVE-2026-21719An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute CubeCart Limited CubeCart
- CVE-2026-5807Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey OperationsHashiCorp Vault · github.com/hashicorp/vault
- CVE-2026-4525Vault Token Leaked to Backends via Authorization: Bearer Passthrough HeaderHashiCorp Vault · github.com/hashicorp/vault
- CVE-2026-3605Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-ServiceHashiCorp Vault · github.com/hashicorp/vault
- CVE-2026-5231WP Statistics <= 14.16.4 - Unauthenticated Stored Cross-Site Scripting via 'utm_source' Parameterveronalabs WP Statistics – Simple, privacy-friendly Google…
- CVE-2026-31317Craftql v1.3.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the venmarkhuot/craftql
Medium, low and unrated 88
- CVE-2026-40347Python-Multipart affected by Denial of Service via large multipart preamble or epilogue dataKludex python-multipart · python-multipart
- CVE-2026-40346NocoBase has SSRF in Workflow HTTP Request and Custom Request Plugins@nocobase/plugin-workflow-request
- CVE-2026-40337Sentry kernel has incomplete ownership check for IRQ line manipulationcamelot-os sentry-kernel
- CVE-2026-40341libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoExlibgphoto2
- CVE-2026-40340libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack.c via malicious PTP ObjectInfo responselibgphoto2
- CVE-2026-40339libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormFlag parsing in ptp-pack.clibgphoto2
- CVE-2026-40338libgphoto2 has OOB read in ptp_unpack_Sony_DPD() enumeration count parsing in ptp-pack.clibgphoto2
- CVE-2026-40485ChurchCRM: Username Enumeration via Differential Response in Public Login APIChurchCRM CRM
- CVE-2026-40336libgphoto2 has memory leak in ptp_unpack_Sony_DPD() secondary enumeration list in ptp-pack.clibgphoto2
- CVE-2026-40483ChurchCRM: Stored XSS in PledgeEditor.php via Donation Comment FieldChurchCRM CRM
- CVE-2026-40335libgphoto2 has OOB read in ptp_unpack_DPV() UINT128/INT128 handling in ptp-pack.clibgphoto2
- CVE-2026-40334libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.clibgphoto2
- CVE-2026-40333libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat() and ptp_unpack_EOS_CustomFuncEx() due to missing length parameter in ptp-pack.clibgphoto2
- CVE-2026-40486Kimai's User Preferences API allows standard users to modify restricted attributes: hourly_rate, internal_ratekimai · kimai/kimai
- CVE-2026-40479Kimai: Stored XSS via Incomplete HTML Attribute Escaping in Team Member Widgetkimai · kimai/kimai
- CVE-2026-2434Pz-LinkCard <= 2.5.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributespoporon Pz-LinkCard
- CVE-2026-40476graphql-php: Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validationwebonyx graphql-php · webonyx/graphql-php
- CVE-2026-40353wger: Stored XSS via Unescaped License Attribution Fieldswger-project wger · wger
- CVE-2026-40306DNN has same HostGUID for all new installsdnnsoftware Dnn.Platform · DotNetNuke.Core
- CVE-2026-40305DNN has Force Friend Request Acceptancednnsoftware Dnn.Platform · DotNetNuke.Core
- CVE-2026-40304zrok's broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend recordsopenziti zrok · github.com/openziti/zrok +1
- CVE-2026-40302zrok has reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error renderingopenziti zrok · github.com/openziti/zrok +1
- CVE-2026-40155Auth0 Next.js SDK has Improper Proxy Cache Lookupnextjs-auth0 · @auth0/nextjs-auth0
- CVE-2026-40301rhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directivesrhukster dom-sanitizer · rhukster/dom-sanitizer
- CVE-2026-40299next-intl has an open redirect vulnerabilityamannn next-intl · next-intl
- CVE-2026-40293OpenFGA Playground Preshared Key Exposureopenfga · github.com/openfga/openfga
- CVE-2026-35603Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windowsanthropics claude-code · @anthropic-ai/claude-code
- CVE-2026-35402mcp-neo4j-cypher: SSRF and Data Modification via read_only Mode Bypass Through CALL Proceduresneo4j-contrib mcp-neo4j · mcp-neo4j-cypher
- CVE-2026-33436Stirling-PDF: Reflected XSS through crafted filename in file upload functionalityStirling-Tools Stirling-PDF
- CVE-2026-40284WeGIA has stored XSS in listar_despachos.phpLabRedesCefetRJ WeGIA
- CVE-2026-40282WeGIA has stored XSS in intercorrencia_visualizar.phpLabRedesCefetRJ WeGIA
- CVE-2026-33145xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesmanneutrinolabs xrdp
- CVE-2026-40283WeGIA has stored XSS in profile_paciente.phpLabRedesCefetRJ WeGIA
- CVE-2026-32624xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculationneutrinolabs xrdp
- CVE-2026-32648Anviz Products Missing AuthorizationAnviz CX7 Firmware · Anviz CX2 Lite Firmware
- CVE-2026-33569Anviz Products Cleartext Transmission of Sensitive InformationAnviz CX7 Firmware · Anviz CX2 Lite Firmware
- CVE-2026-31927Anviz CX7 Firmware Relative Path TraversalAnviz CX7 Firmware
- CVE-2026-35061Anviz Products Missing AuthorizationAnviz CX7 Firmware
- CVE-2026-33093Anviz Products Missing AuthorizationAnviz CX7 Firmware
- CVE-2026-6437AWS EFS CSI Driver Mount Option InjectionAmazon AWS EFS CSI Driver · github.com/kubernetes-sigs/aws-…
- CVE-2026-28214Firebird server hangs when using specific clumplet on batch creationFirebirdSQL firebird
- CVE-2026-40320Giskard has an Unsandboxed Jinja2 Template Rendering in ConformityCheckGiskard-AI giskard-oss · giskard-checks
- CVE-2026-40319Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching CheckGiskard-AI giskard-oss · giskard-checks
- CVE-2026-21709A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.Veeam Backup and Replication · Veeam Software Appliance
- CVE-2026-6497prasathmani TinyFileManager File Upload filemanager.php server-side request forgeryprasathmani TinyFileManager
- CVE-2026-6496prasathmani TinyFileManager POST Parameter filemanager.php path traversalprasathmani TinyFileManager
- CVE-2026-41153In JetBrains Junie before 252.549.29 command execution was possible via malicious project fileJetBrains Junie
- CVE-2026-6493lukevella rallly Reset Password reset-password-form.tsx cross site scriptinglukevella rallly
- CVE-2026-6492arnobt78 Hotel Booking Management System Health Check Endpoint detailed information disclosurearnobt78 Hotel Booking Management System
- CVE-2026-6491libvips nip2 vips7compat.c im_minpos_vec heap-based overflowlibvips
- CVE-2026-6490QueryMine sms GET Request Parameter deletecourse.php sql injectionQueryMine sms
- CVE-2026-6489QueryMine sms Background Management addteacher.php unrestricted uploadQueryMine sms
- CVE-2026-6488QueryMine sms GET Request Parameter editcourse.php sql injectionQueryMine sms
- CVE-2026-6487Qihui jtbc5 CMS Code Endpoint manage.php path traversalQihui jtbc5 CMS
- CVE-2026-6486classroombookings User Display Name layout.php read cross site scriptingclassroombookings
- CVE-2026-23777Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release verDell PowerProtect Data Domain
- CVE-2026-28263Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release verDell PowerProtect Data Domain
- CVE-2025-46606Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper restDell PowerProtect Data Domain
- CVE-2025-46605Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain a session fixatiDell PowerProtect Data Domain
- CVE-2025-46641Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authDell PowerProtect Data Domain
- CVE-2025-46607Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authDell PowerProtect Data Domain
- CVE-2026-35073Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2Dell PowerProtect Data Domain
- CVE-2026-35074Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2Dell PowerProtect Data Domain
- CVE-2026-35072Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2Dell PowerProtect Data Domain
- CVE-2026-5131Server-Side Request Forgery in GREENmodNomios Poland GREENmod
- CVE-2026-35153Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2Dell PowerProtect Data Domain
- CVE-2026-23779Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release verDell PowerProtect Data Domain
- CVE-2025-15622Sparx Enterprise Architect Client reveals plaintext OAuth2 client secretSparx Systems Pty Sparx Enterprise Architect
- CVE-2026-6439VideoZen <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'VideoZen available subtitles languages' Fieldjconti VideoZen
- CVE-2026-6494Aap-mcp-server: aap mcp server: log injection allows social engineering attacks via unsanitized inputRed Hat Ansible Automation Platform
- CVE-2026-6451CMS für Motorrad Werkstätten <= 1.0.0 - Cross-Site Request Forgerytholstkabelbwde Plugin: CMS für Motorrad Werkstätten
- CVE-2026-40002ZTE Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations.ZTE Red Magic 11 Pro
- CVE-2026-6441Canto <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Setting Modificationflightbycanto Canto
- CVE-2026-5797Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fieldsexpresstech Quiz and Survey Master (QSM) – Easy Quiz and Su…
- CVE-2026-35496A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-lCubeCart Limited CubeCart
- CVE-2026-34018An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the pCubeCart Limited CubeCart
- CVE-2026-5502Tutor LMS <= 3.9.8 - Authenticated (Subscriber+) Arbitrary Course Content Manipulation via tutor_update_course_content_orderthemeum Tutor LMS – eLearning and online course solution
- CVE-2026-5427Kubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block Attributesextendthemes Kubio AI Page Builder
- CVE-2026-5234LatePoint <= 5.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Financial Data Exposure via Sequential Invoice IDLatePoint – Calendar Booking Plugin for Appointments and Ev…
- CVE-2026-6080Tutor LMS <= 3.9.8 - Authenticated (Admin+) SQL Injection via 'date' Parameterthemeum Tutor LMS – eLearning and online course solution
- CVE-2026-3330Form Maker by 10Web <= 1.15.40 - Authenticated (Administrator+) SQL Injection via 'ip_search' ParameterForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…
- CVE-2026-4853JetBackup <= 3.1.19.8 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal in 'fileName' Parameterbackupguard JetBackup – Backup, Restore & Migrate
- CVE-2026-5052Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNSHashiCorp Vault · github.com/hashicorp/vault
- CVE-2026-4666wpForo Forum <= 2.4.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Forum Post Modification via 'guestposting' Parametertomdever wpForo Forum
- CVE-2026-3488WP Statistics <= 14.16.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure and Privacy Audit Manipulationveronalabs WP Statistics – Simple, privacy-friendly Google…
- CVE-2026-4817MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parametersstylemix MasterStudy LMS WordPress Plugin – for Online Cour…
- CVE-2026-5162Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widgetwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2025-70795STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to termin